Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa
File:                     34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa (raw, json)
Hash identifier:          A6Inn3M6Hn3n3Bif+4a3PgZH13eOiRE8Z+1gOnLBBfw=
Subject key identifier:   05:79:17:17:52:C8:DA:6F:F5:B1:F9:DB:8C:1E:DC:86:05:40:AE:A1
Certificate issuer:       /CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
Certificate serial:       19F799F7A2EF0BE19C647B865E36A2D1CE9E2450
Authority key identifier: 42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa
Signing time:             Tue 05 Sep 2023 14:04:36 +0000
ROA not before:           Tue 05 Sep 2023 13:59:36 +0000
ROA not after:            Tue 03 Sep 2024 14:04:36 +0000
asID:                     268616
IP address blocks:        45.164.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f7:99:f7:a2:ef:0b:e1:9c:64:7b:86:5e:36:a2:d1:ce:9e:24:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420734A528D0DD1EA09F6BB591E3B023EDB9EDDA
        Validity
            Not Before: Sep  5 13:59:36 2023 GMT
            Not After : Sep  3 14:04:36 2024 GMT
        Subject: CN=0579171752C8DA6FF5B1F9DB8C1EDC860540AEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:7a:5c:86:04:b8:a3:ef:57:27:62:72:a5:
                    06:0c:7c:60:ba:23:3d:79:e4:43:ad:2c:ad:3c:a4:
                    37:40:57:43:09:67:97:86:5e:06:31:da:a4:53:2a:
                    ad:86:9a:40:13:db:a0:79:89:66:d1:dc:b3:45:1d:
                    2a:28:5e:b3:06:7a:e6:da:8d:51:7a:ac:33:47:f9:
                    ac:c1:91:16:d4:29:26:9f:7a:1f:55:9d:c1:36:d3:
                    70:99:d9:5b:0d:1c:cc:81:2b:81:3c:6a:b8:f9:22:
                    43:70:02:78:a0:12:9e:1f:18:55:e9:d0:47:39:17:
                    2b:8a:ec:8c:2b:4a:9a:e1:e7:d5:89:92:ff:60:c5:
                    57:0b:c8:bd:83:3e:44:08:09:51:0b:0b:8e:09:96:
                    0c:ae:e4:6c:1b:22:7a:31:86:91:f7:16:7a:c6:57:
                    7b:3d:be:ab:83:73:c2:6b:2e:c0:f6:ae:88:b6:f1:
                    29:48:33:6c:3d:68:7f:64:c7:de:00:ee:c0:8f:90:
                    e3:20:9b:36:86:3a:28:18:c2:a5:82:c7:f4:34:0b:
                    7e:84:58:2f:07:e5:c1:fd:f0:21:3e:a2:4b:ae:19:
                    75:9e:d4:b2:78:5c:e2:33:15:95:5c:51:31:c9:fa:
                    8d:5a:b6:aa:94:29:33:39:f2:62:06:6a:d7:7a:26:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:79:17:17:52:C8:DA:6F:F5:B1:F9:DB:8C:1E:DC:86:05:40:AE:A1
            X509v3 Authority Key Identifier:
                keyid:42:07:34:A5:28:D0:DD:1E:A0:9F:6B:B5:91:E3:B0:23:ED:B9:ED:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/420734A528D0DD1EA09F6BB591E3B023EDB9EDDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32332d3233203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:2e:07:69:7d:8d:a9:bf:98:70:4d:0d:76:53:64:18:58:8b:
         e8:6b:63:f1:2d:c9:5b:bb:65:c8:ec:bd:c1:2c:5f:c2:51:bd:
         be:34:25:80:a3:19:b1:78:d8:3b:96:5a:a1:1a:02:35:bf:8b:
         4e:c0:fe:48:29:19:61:fe:41:76:ee:46:aa:8e:d0:65:e4:03:
         b0:80:eb:ca:b3:98:8a:ea:1b:59:90:3c:f2:48:88:8d:45:3c:
         a1:e6:df:e8:15:40:7d:89:fe:66:d4:e8:8f:b8:a4:fb:b2:2e:
         9b:3c:bd:8f:2d:cc:c2:de:5b:f3:dd:30:77:f9:ee:3a:74:ff:
         37:1b:73:06:3d:0a:7f:41:74:c8:36:94:29:83:11:36:40:a2:
         96:4c:dc:8f:fc:b9:07:81:30:58:f6:85:ab:15:a9:1a:68:be:
         ce:34:a9:4e:84:48:6d:f1:60:ad:f2:da:78:0a:40:3a:4d:3b:
         85:9b:92:ac:7d:93:74:ae:ce:a3:7d:55:e1:69:b3:51:03:dc:
         ba:6e:08:6b:d3:21:7d:bf:f5:a0:57:ad:bd:f0:f8:e1:54:24:
         21:dc:2c:d5:f8:8f:54:87:11:12:65:be:ab:9c:4f:2f:22:d6:
         af:ac:56:b1:05:ef:e3:77:75:d3:d3:8a:c7:44:69:09:7b:29:
         04:e0:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org